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DETAILED ACTION 

1. Claims 1-6, 8-17, 19-28, 30-39, 41-50, 52-61, 63-66 are 
pending . 

2. Amendment filed 10/05/2005 with a request for continued 
examination has been received and considered. 

Claim Rejections - 35 VSC § 103 

3. Claims 1-66 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over "Symantec System Center Implementation Guide 
(hereinafter Symantec) further in view of Chen et al (U.S. 
5,960,170), further in view of Brown ("Data Communications' 7 ) and 
further in view of Graham ( "URLs for HTTP Servers") . 

As per claims 1, 12, 23, 34, 45, 56, Symantec discloses a 
computer program product, method, and computer comprising a 
computer program operable to control a reporting computer to 
report occurrence of an event to a receiving computer, said 
computer program comprising: report generating logic operable to 
generate report data identifying said reporting computer and 
said event (see pages 72-73) ; data retrieving logic operable to 
fetch requested data from said receiving computer to said 
reporting computer upon a request of said reporting computer 
(see pages 13, 18) . 
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Symantec fails to disclose report sending logic operable to 
send said report data from said reporting computer to said 
receiving computer upon fetching of said requested data. 

However, Chen et al teaches such a sending method (see 
column 7 lines 33-45) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use Chen et al's method 
of sending reports to send Symantec's generated reports. 

Motivation to do so would have been to provide iterative 
virus detection (see Chen et al column 2 lines 62-63) . 

The modified Symantec and Chen et al system fails to 
disclose sending data while fetching data. 

However, Brown teaches this two was communication (see page 

2) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use Brown's two-way 
communication to send and receive the data of the modified 
Symantec and Chen et al system. 

Motivation to do so would have been to allow both 
communications to work at the same time (see Brown page 2). 

The modified Symantec, Chen et al, and Brown system 
discloses the use of URLs, but fails to disclose the data 
retrieving logic and said report sending logic use an internet 
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URL to specify said requested data to said receiving computer, 
said internet URL also containing said report data to be sent to 
said receiving computer. 

However, Graham teaches such a limitation sending of 
information in a URL (see section 8.1.1). 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to send the data of the 
modified Symantec, Chen et al, and Brown system using the URLs 
of Graham. 

Motivation to do so would have been to pass arguments to 
the server (see section 8.1.1). 

As per claims 2, 13, 24, 35, 46, 57, the modified Symantec, 
Chen et al, Brown, and Graham system discloses the event is 
detection of a computer file containing an unwanted computer 
program (see Symantec page 73 figure) . 

As per claims 3, 14, 25, 36, 47, 58, the modified Symantec, 
Chen et al, Brown, and Graham system discloses the unwanted 
computer program is a computer virus (see Symantec page 73 
figure) . 

As per claims 4, 15, 26, 37, 48, 59, the modified Symantec, 
Chen et al, Brown, and Graham system discloses the requested 
data is a description of said event (see Symantec pages 13 and 
18) . 
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As per claims 5, 16, 27, 38, 49, 60, the modified Symantec, 
Chen et al, Brown, and Graham system discloses the event is 
detection of a computer file containing a computer virus (see 
Symantec page 73) and the requested data is a description of the 
computer virus (see Symantec page 18) . 

As per claims 6, 17, 28, 39, 50, 61, the modified Symantec, 
Chen et al, Brown, and Graham system discloses the event is 
detection of a computer file containing a computer virus (see 
Symantec page 73) ; and said requested data is an updated set of 
computer virus detecting data for use in detecting computer 
viruses (see Symantec page 18). 

As per claims 8, 19, 30, 41, 52, 63, the modified Symantec, 
Chen et al, Brown, and Graham system discloses said reporting 
computer collates report data specifying one or more events that 
is sent together from said reporting computer to said receiving 
computer after fetching of said requested data (see Symantec 
page 73 figure) . 

As per claims 10, 21, 32, 43, 54, 65, the modified 
Symantec, Chen et al, Brown, and Graham system discloses said 
reporting computer and said receiving computer communicate via 
an internet link (see Chen et al column 5 lines 39-57). 

As per claims 11, 22, 33, 44, 55, 66, the modified 
Symantec, Chen et al, Brown, and Graham system discloses said 
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reporting data includes one or more of: a MAC address 
identifying a network card of said reporting computer; a date of 
said event; a time of said event; an identifier of a computer 
program used by said reporting computer to detect said event; an 
identifier of a version of a computer program used by said 
reporting computer to detect said event; an identifier of a set 
of event detecting data used by a computer program used by said 
reporting computer to detect said event; an identifier of an 
event type detected by said reporting computer; an action taken 
by said reporting computer upon detection of said event; and a 
checksum of a file that triggered said event (see Symantec page 
73) . 

4. Claims 9, 20, 31, 42, 53, 64 are rejected under 35 
U.S.C. 103(a) as being unpatentable over the modified Symantec, 
Chen et al, Brown, and Graham system as applied to claims 1, 12, 
23, 34, 45, 56 above, and further in view of Menezes et al 
("Handbook of Applied Cryptography") . 

As per claims 9, 20, 31, 42, 53, 64, the modified Symantec, 
Chen et al, and Brown system fails to disclose the report data 
is encrypted by said reporting computer and decrypted by said 
receiving computer . 

However, Menezes et al discloses encrypting of data (see 
pages 15-16) . 
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At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use Menezes et al's 
method of encryption to encrypt the report data of the modified 
Symantec and Chen et al system. 

Motivation to do so would have been achieve confidentiality 
(see Menezes et al page 12) . 

Response to Arguments 

Applicant's arguments filed 10/05/2005 with respect to the 
pending claims are moot in view of the new grounds of rejection. 

Conclusion 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Michael 
Pyzocha whose telephone number is (571) 272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm first Fridays of the 
bi-week off. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Emmanuel Moise can be 
reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 
703-872-9306. 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . 



MJP 




